[GIT PULL] apparmor bug fixes for 6.5
John Johansen
john.johansen at canonical.com
Thu Jul 6 18:28:17 UTC 2023
Hi Linus,
Please pull the following set bug fixes to apparmor for 6.5 or 6.5-rc1
+ Bug Fixes
- fix missing error check for rhashtable_insert_fast
- add missing failure check in compute_xmatch_perms
- fix policy_compat permission remap with extended permissions
- fix profile verification and enable it
- fix: kzalloc perms tables for shared dfas
- Fix kernel-doc header for verify_dfa_accept_index
- aa_buffer: Convert 1-element array to flexible array
- Return directly after a failed kzalloc() in two functions
- fix use of strcpy in policy_unpack_test
- fix kernel-doc complaints
- Fix some kernel-doc comments
thanks
- john
The following changes since commit 1b929c02afd37871d5afb9d498426f83432e71c2:
Linux 6.2-rc1 (2022-12-25 13:41:39 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/jj/linux-apparmor tags/apparmor-pr-2023-07-06
for you to fetch changes up to 3f069c4c643225f2b96b4b3f8c30e4445f079d2e:
apparmor: Fix kernel-doc header for verify_dfa_accept_index (2023-07-06 11:12:10 -0700)
----------------------------------------------------------------
+ Bug Fixes
apparmor: fix missing error check for rhashtable_insert_fast
apparmor: add missing failure check in compute_xmatch_perms
apparmor: fix policy_compat permission remap with extended permissions
apparmor: fix profile verification and enable it
apparmor: fix: kzalloc perms tables for shared dfas
apparmor: Fix kernel-doc header for verify_dfa_accept_index
apparmor: aa_buffer: Convert 1-element array to flexible array
apparmor: Return directly after a failed kzalloc() in two functions
apparmor: fix use of strcpy in policy_unpack_test
apparmor: fix kernel-doc complaints
AppArmor: Fix some kernel-doc comments
----------------------------------------------------------------
Danila Chernetsov (1):
apparmor: fix missing error check for rhashtable_insert_fast
John Johansen (5):
apparmor: add missing failure check in compute_xmatch_perms
apparmor: fix policy_compat permission remap with extended permissions
apparmor: fix profile verification and enable it
apparmor: fix: kzalloc perms tables for shared dfas
apparmor: Fix kernel-doc header for verify_dfa_accept_index
Kees Cook (1):
apparmor: aa_buffer: Convert 1-element array to flexible array
Markus Elfring (1):
apparmor: Return directly after a failed kzalloc() in two functions
Rae Moar (1):
apparmor: fix use of strcpy in policy_unpack_test
Randy Dunlap (1):
apparmor: fix kernel-doc complaints
Yang Li (1):
AppArmor: Fix some kernel-doc comments
security/apparmor/crypto.c | 10 ++--
security/apparmor/file.c | 2 +-
security/apparmor/lsm.c | 8 +--
security/apparmor/policy.c | 20 +++++--
security/apparmor/policy_compat.c | 20 +++++--
security/apparmor/policy_unpack.c | 102 +++++++++++++++++++++------------
security/apparmor/policy_unpack_test.c | 13 ++---
security/apparmor/secid.c | 3 +-
8 files changed, 110 insertions(+), 68 deletions(-)
More information about the Linux-security-module-archive
mailing list